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WHAT IS CLAIMED IS: 



1. 



3. 



A computer system comprising: 
a processor; \ 

an access token communicator capable of being coupled to the 

processor, the access token communicator being adapted to 
read an access token; 

an input device capable of being coupled to the processor, the input 
device being adapted to receive verification data, the 
verification data confirming authorized use of the access token; 

a software system execi itable on the processor and including a system 
security process controlling operational access to the processor, 
the software system including: 

an executable piogram code that accesses the access token and 

the verifi cation data; 
an executable pi ogram code that verifies validity of the access 
token using the verification data; 

)gram code that sets security policies in the 
and 

an executable program code that controls access to resources in 
the proce ;sor based on the security policies. 

The computer system of claim 1 further comprising: 

a nonvolatile storage device operably coupled to the processor; 
a nonvolatile storage device access password that selectively allows 
access to the nonvolatile storage device, wherein the 
nonvolatile storage device password is supplied in response to 
the access token ] eading device reading an access token and the 
input device rece: ving verification data. 



an executable pr 
processor 



The computer system of claim 2 
policies is stored within the nonv 



wherein at least one of the one or more 
latile storage device password. 
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1 4. The computer system of claim 1 , wherein at least one of the one or more 

2 policies is stored on the access token. 

1 5. The computer swem of claim 1 wherein one of the one or more policies 

2 corresponds to the verification data. 



1 

2 
3 

1 

2 
3 
4 

1 

2 
3 

1 
2 



6. 



8. 



The computer system of claim 1 wherein one of the one or more policies 
includes BIOS control information that is used to configure the computer 
system. 



syste n 



The computer 
includes password 
including one or m<|>re 
one or more policiejs 



of claim 6 wherein the BIOS control information further 
<£hange information, the password change information 

password change settings for a user using the one of the 



The computer 
one of the one or 
control a desktop 



syste m 



syste] n 



The computer 
nonvolatile storage 



of claim 1 further comprising a display device, wherein 
m0re policies includes one or more interface settings that 
presentation on the display device. 



of claim 2 wherein a password corresponding to the 
device access password is stored on the access token. 



1 10. The computer system of claim 2 wherein one or more bytes of the nonvolatile 

2 storage device access password are in a non-keyboard enterable format. 

1 11. The computer system of claim 1 wherein the access token includes one or 

2 more bytes of dajta in a non-keyboard enterable format. 



1 12. The computer system 

2 biometric data s 



of claim 1 wherein the verification data includes 
sbpplied by a user. 
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1 13. The computer system of claim 1 wherein the input device includes a keyboard 

2 and the verification data includes a personal identification number. 



1 
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4 
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14. 



A computer system 
one or more 



ompnsing: 
>rocessors; 



15. 



16. 



17. 



memory elec rically interconnected to the one or more processors; 
an operating system for controlling the operation of the one or more 
proce ssors; 

an access token communication device electrically interconnected to at 

least me of the one or more processors; 
an input dev ce electrically interconnected to at least one of the one or 

mor^ processors; 

a nonvolatile storage device electrically interconnected to at least one 
of th< : one or more processors, the nonvolatile storage device 
including a nonvolatile memory; 

one or more policies associated with the operating system; 

wherein the operating system includes security code selectively 
enabl ed by the one or more policies to limit access to the 
comp uter system responsively to an access token read by the 
acces > token communication device. 

The computer system of claim 14 wherein the access token further includes 
verification data, wherein the access token is read in response to the input 
device receiving aut lentication data corresponding to the verification data. 

The computer system of claim 14 wherein the operating system includes a 
BIOS and wherein he BIOS is stored on nonvolatile memory that is 
electrically intercoi nected to the one or more processors. 

The computer system of claim 14 wherein the access token communication 
device includes a smart card communication device. 
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1 18. The computer system of claim 14 wherein the access token communication 

2 device includes netvrark circuitry that is adapted to receive signals from one or 

3 more computers interconnected on a computer network. 

1 19. The computer system onclaim 14 wherein the access token communication 

2 device includes a modemWhat receives signals from a communications line. 

1 20. The computer system of claim 14 wherein the input device is a keyboard. 



In 



1 21 . The computer system of claim 14 wherein the input device includes a 

2 biometric data reading devide. 

1 22. The computer system of clai n 14 wherein the biometric data reading device 

2 includes a fingerprint scanne 



l 23. 
2 

1 24. 

2 



1 

2 
3 

1 

2 
3 
4 
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6 



25. 



The computer system of claim 
in the nonvolatile memory, 
data access code alters a state 



26. A method for manufacturing 



The computer system of clairii 14 wherein the biometric data reading device 
includes a retinal scanning device. 

The computer system of clainji 14 wherein the nonvolatile storage device 
includes a hard disk drive. 



14 further comprising a data access code stored 
wherein a data request code corresponding to the 
of the nonvolatile storage device. 



a computer system, said method comprising: 



providing a computer system, the computer system including: 
one or more processors; 

memory opeiably coupled to the one or more processors; 
one or more i mages of an operating system for controlling the 
opera ion of the one or more processors; 



V 
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an access token reading device that is adapted to read an access 
token; 1 

an input devicelthat is adapted to receive verification data, the 
verification data confirming authorized use of the access 
token; 

a nonvolatile sto -age device operably coupled to the memory; 

a nonvolatile storage device access password that selectively 

allows access to the nonvolatile storage device, wherein 
the nonvolatile storage device password is supplied in 
response to the access token reading device reading an 
access tpken and the input device receiving verification 
data; I 

storing a master passv /ord on the access token; and 



storing a nonvolatile 



storage device password on the access token. 



27. The method of claim 26 turtfier comprising: 

storing a password corresponding to the nonvolatile storage device 
password oiJthe nonvolatile storage device. 



28. A method for protecting information stored in an information handling system, 
said method comprising: 

reading an access 1 3ken; 
verifying the valid ty of the access token; 
setting security policies in the information handling system; 
unlocking a nonvolatile storage device on the information handling 
system. 



29. A method for assembling a computer system, said method comprising: 

receiving a listiof components for assembling the computer system; 
receiving one or more security policies; and 
configuring thfe computer system using the one or more security 
policies. 
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30. 



31. 
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The method of claim 29 further 
initializing a system 



comprising: 
password installed on the computer system. 



The method of claim 29 lurfner comprising: 

providing a nonvolatile storage device for the computer system, 

wherein the/nonvolatile storage device includes a nonvolatile 
storage device password; and 
initializing the nonvolatile storage device password. 



32. The method of claim 29 wherein the configuring includes modifying a 
nonvolatile memory installed in the computer system. 

33. The method of claim 29/further comprising: 

retaining a copy of the nonvolatile storage device password at a 
location removed from the computer system. 

34. The method of claim 29 further comprising: 

preparing an access token for the computer system. 

35. A method of using an access token, said method comprising: 
transferring one or more passwords from the access token to a 

Computer system. 

36. The method eft* claim 35 wherein the transferring is in response to an access 
code received by the access token. 

37. The methad of claim 35 wherein one of the one or more passwords 
corresponds to a computer system password installed on the computer system. 



38. The met] 



storage 



iod of claim 35 wherein one of the one or more passwords 



corresponds to a nonvolatile storage device password installed on a nonvolatile 



evice. 
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1 39. 



l 
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40. 
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The method of cl 



herein the access token. 



An access token for use \yith a computer system, said access token 
comprising: 

one or more security policies adapted to be used by a computer system, 
wherein the one or more security policies are stored in an 
encrypted format; and 

an access code stored on the access token, wherein the access token 
transmits the one or more security policies in response to 
receiving a data stream corresponding to the access code. 



1 

2 
3 
4 
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41. 



42. 



A computer operable medium for protecting a computer system, said computer 
operable medium comprising: 

means for reading an access token; 
means for verifying the validity of the access token; 
means for setting security policies in the information handling system; 
and 

means for un ocking a nonvolatile storage device on the information 
hand! ng system. 



An information hand 



ing system comprising: 



means for rea< ling an access token; 
means for verifying the validity of the access token; 
means for setting security policies in the information handling system; 
and 

:king a nonvolatile storage device on the information 
system. 



means for unlo 
handling 
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